CVE Notifier

CVE-2026-85190 CWE-79 N/A

Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5

Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5 - Quick Index inserts configurable class values into generated HTML without escaping them for an HTM…

cve.org regularlabs.com:Quick · Index · (Free, 14 Sep 2026

CVE-2026-85192 CWE-94 N/A

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In …

cve.org regularlabs.com:Conditional · Content · Pro 14 Sep 2026

CVE-2026-85189 CWE-79 N/A

Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination using an executable browser URL scheme as an ordinary modal URL.…

cve.org regularlabs.com:Modals · (Free, · Pro) 14 Sep 2026

CVE-2026-90689 CWE-121 8.8

Tenda W20E formDelWebAuthWhiteUser stack-based overflow

A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based bu…

cve.org Tenda:W20E 14 Sep 2026

CVE-2026-85195 CWE-79 N/A

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions…

cve.org regularlabs.com:Articles · Anywhere · (Free, 14 Sep 2026

CVE-2026-88853 CWE-79 N/A

Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affecte…

cve.org regularlabs.com:Modals · (Pro) · extension 14 Sep 2026

CVE-2026-85191 CWE-79 N/A

Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0

Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0 - Tabs & Accordions rewrites links matching an item alias into calls to its browser API. …

cve.org regularlabs.com:Tabs · & · Accordions 14 Sep 2026

CVE-2026-85188 CWE-200 N/A

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joom…

cve.org regularlabs.com:Advanced · Module · Manager 14 Sep 2026

CVE-2026-90688 CWE-121 6.5

Tenda W20E HTTP formIPMacBindAdd stack-based overflow

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-b…

cve.org Tenda:W20E 14 Sep 2026

CVE-2026-16726 CWE-120 N/A

CVE-2026-16726

Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows  attackers  to stop Windows.

cve.org panasonic:PANATERM · v6 · panasonic:PANATERM 14 Sep 2026

CVE-2026-90687 CWE-416 6.3

GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free

A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipulation causes use after…

cve.org n/a:GPAC 14 Sep 2026

CVE-2026-90686 CWE-119 5.3

GPAC MP4Box loader_bt.c gf_bt_report memory corruption

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loader_bt.c of the component MP4Box. The manipulation results in memory corruption. The attack may be per…

cve.org n/a:GPAC 14 Sep 2026